org.apache.qpid.server.security.auth.manager.oauth2

Class OAuth2AuthenticationProviderImpl

java.lang.Object

org.apache.qpid.server.model.AbstractConfiguredObject<T>

org.apache.qpid.server.security.auth.manager.AbstractAuthenticationManager<OAuth2AuthenticationProviderImpl>

org.apache.qpid.server.security.auth.manager.oauth2.OAuth2AuthenticationProviderImpl

All Implemented Interfaces:

AuthenticationProvider<OAuth2AuthenticationProviderImpl>, ConfiguredObject<OAuth2AuthenticationProviderImpl>, OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

public class OAuth2AuthenticationProviderImpl
extends AbstractAuthenticationManager<OAuth2AuthenticationProviderImpl>
implements OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.qpid.server.model.AbstractConfiguredObject

AbstractConfiguredObject.CallableWithArgument<V,A>, AbstractConfiguredObject.ChainedListenableFuture<V>, AbstractConfiguredObject.ChainedSettableFuture<V>, AbstractConfiguredObject.DuplicateIdException, AbstractConfiguredObject.DuplicateNameException

Field Summary

Fields inherited from class org.apache.qpid.server.model.AbstractConfiguredObject

SECURED_STRING_VALUE

Fields inherited from interface org.apache.qpid.server.security.auth.manager.oauth2.OAuth2AuthenticationProvider

AUTHENTICATION_OAUTH2_CONNECT_TIMEOUT, AUTHENTICATION_OAUTH2_READ_TIMEOUT, DEFAULT_AUTHENTICATION_OAUTH2_CONNECT_TIMEOUT, DEFAULT_AUTHENTICATION_OAUTH2_READ_TIMEOUT

Fields inherited from interface org.apache.qpid.server.model.ConfiguredObject

CONTEXT, CREATED_BY, CREATED_TIME, DESCRIPTION, DESIRED_STATE, DURABLE, ID, LAST_UPDATED_BY, LAST_UPDATED_TIME, LIFETIME_POLICY, NAME, OVER_SIZED_ATTRIBUTE_ALTERNATIVE_TEXT, STATE, TYPE

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	OAuth2AuthenticationProviderImpl(Map<String,Object> attributes, Broker<?> broker)

Method Summary

Modifier and Type	Method and Description
AuthenticationResult	authenticate(SaslServer server, byte[] response) Authenticates a user using SASL negotiation.
AuthenticationResult	authenticateViaAccessToken(String accessToken)
AuthenticationResult	authenticateViaAuthorizationCode(String authorizationCode, String redirectUri)
SaslServer	createSaslServer(String mechanism, String localFQDN, Principal externalPrincipal) Creates a SASL server for the specified mechanism name for the given fully qualified domain name.
URI	getAuthorizationEndpointURI()
String	getClientId()
String	getClientSecret()
int	getConnectTimeout()
URI	getDefaultAuthorizationEndpointURI()
URI	getDefaultIdentityResolverEndpointURI()
String	getDefaultScope()
URI	getDefaultTokenEndpointURI()
URI	getIdentityResolverEndpointURI()
String	getIdentityResolverType()
List<String>	getMechanisms() Gets the SASL mechanisms known to this manager.
URI	getPostLogoutURI()
int	getReadTimeout()
String	getScope()
List<String>	getTlsCipherSuiteBlackList()
List<String>	getTlsCipherSuiteWhiteList()
List<String>	getTlsProtocolBlackList()
List<String>	getTlsProtocolWhiteList()
boolean	getTokenEndpointNeedsAuth()
URI	getTokenEndpointURI()
TrustStore	getTrustStore()
protected void	onOpen()
void	onValidate() Validation performed for configured object creation and opening.
protected void	validateChange(ConfiguredObject<?> proxyForValidation, Set<String> changedAttributes)
static Collection<String>	validIdentityResolvers()

Methods inherited from class org.apache.qpid.server.security.auth.manager.AbstractAuthenticationManager

activate, addChildAsync, doDelete, getBroker, getDisabledMechanisms, getPreferencesProvider, getSecureOnlyMechanisms, getSubjectCreator, getVirtualHostPortBindings, recoverUser, setPreferencesProvider, startQuiesced

Methods inherited from class org.apache.qpid.server.model.AbstractConfiguredObject

addChangeListener, applyToChildren, asObjectRecord, attainState, attributeSet, authoriseCreate, authoriseCreateChild, authoriseDelete, authoriseSetAttributes, beforeClose, changeAttribute, changeAttributes, childAdded, childRemoved, close, closeAsync, closeChildren, create, createAsync, createChild, createChildAsync, decryptSecrets, delete, deleteAsync, deleted, doAfter, doAfter, doAfter, doAfter, doAfter, doAfter, doAfterAlways, doAfterAlways, doCreation, doOnConfigThread, doOpening, doResolution, doSync, doSync, doValidation, findConfiguredObject, forceUpdateAllSecureAttributes, getActualAttributes, getAttainedChildById, getAttainedChildByName, getAttribute, getAttributeNames, getCategoryClass, getChildById, getChildByName, getChildExecutor, getChildren, getContext, getContextKeys, getContextValue, getContextValue, getCreatedBy, getCreatedTime, getDescription, getDesiredState, getId, getLastOpenedTime, getLastUpdatedBy, getLastUpdatedTime, getLifetimePolicy, getModel, getName, getObjectFactory, getParent, getSecurityManager, getState, getStatistics, getTaskExecutor, getType, getTypeClass, handleExceptionOnOpen, isDurable, managesChildStorage, notifyStateChanged, onClose, onCreate, onExceptionInOpen, onResolve, open, openAsync, parentsMap, postResolve, postResolveChildren, registerWithParents, removeChangeListener, rethrowRuntimeExceptionsOnOpen, runTask, setAttribute, setAttributes, setAttributesAsync, setEncrypter, setState, start, startAsync, stop, toString, validateOnCreate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.apache.qpid.server.security.auth.manager.oauth2.OAuth2AuthenticationProvider

getSecureOnlyMechanisms

Methods inherited from interface org.apache.qpid.server.model.AuthenticationProvider

getDisabledMechanisms, getPreferencesProvider, getSubjectCreator, getVirtualHostPortBindings, recoverUser, setPreferencesProvider

Methods inherited from interface org.apache.qpid.server.model.ConfiguredObject

addChangeListener, asObjectRecord, close, closeAsync, createChild, createChildAsync, decryptSecrets, delete, deleteAsync, findConfiguredObject, getActualAttributes, getAttainedChildById, getAttainedChildByName, getAttribute, getAttributeNames, getCategoryClass, getChildById, getChildByName, getChildExecutor, getChildren, getContext, getContextKeys, getContextValue, getContextValue, getCreatedBy, getCreatedTime, getDescription, getDesiredState, getId, getLastOpenedTime, getLastUpdatedBy, getLastUpdatedTime, getLifetimePolicy, getModel, getName, getObjectFactory, getParent, getState, getStatistics, getTaskExecutor, getType, getTypeClass, isDurable, managesChildStorage, open, openAsync, removeChangeListener, setAttribute, setAttributes, setAttributesAsync

Constructor Detail

OAuth2AuthenticationProviderImpl

protected OAuth2AuthenticationProviderImpl(Map<String,Object> attributes,
                                           Broker<?> broker)

Method Detail

onOpen

protected void onOpen()

Overrides:

onOpen in class AbstractAuthenticationManager<OAuth2AuthenticationProviderImpl>

validateChange

protected void validateChange(ConfiguredObject<?> proxyForValidation,
                              Set<String> changedAttributes)

Overrides:

validateChange in class AbstractConfiguredObject<OAuth2AuthenticationProviderImpl>

onValidate

public void onValidate()

Description copied from class: AbstractConfiguredObject

Validation performed for configured object creation and opening.

Overrides:

onValidate in class AbstractAuthenticationManager<OAuth2AuthenticationProviderImpl>

getMechanisms

public List<String> getMechanisms()

Description copied from interface: AuthenticationProvider

Gets the SASL mechanisms known to this manager.

Specified by:

getMechanisms in interface AuthenticationProvider<OAuth2AuthenticationProviderImpl>

Returns:

SASL mechanism names, space separated.

createSaslServer

public SaslServer createSaslServer(String mechanism,
                                   String localFQDN,
                                   Principal externalPrincipal)
                            throws SaslException

Description copied from interface: AuthenticationProvider

Creates a SASL server for the specified mechanism name for the given fully qualified domain name.

Specified by:

createSaslServer in interface AuthenticationProvider<OAuth2AuthenticationProviderImpl>

Parameters:

mechanism - mechanism name

localFQDN - domain name

externalPrincipal - externally authenticated Principal

Returns:

SASL server

Throws:

SaslException

authenticate

public AuthenticationResult authenticate(SaslServer server,
                                         byte[] response)

Description copied from interface: AuthenticationProvider

Authenticates a user using SASL negotiation.

Specified by:

authenticate in interface AuthenticationProvider<OAuth2AuthenticationProviderImpl>

Parameters:

server - SASL server

response - SASL response to process

Returns:

authentication result

authenticateViaAuthorizationCode

public AuthenticationResult authenticateViaAuthorizationCode(String authorizationCode,
                                                             String redirectUri)

Specified by:

authenticateViaAuthorizationCode in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

authenticateViaAccessToken

public AuthenticationResult authenticateViaAccessToken(String accessToken)

Specified by:

authenticateViaAccessToken in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getAuthorizationEndpointURI

public URI getAuthorizationEndpointURI()

Specified by:

getAuthorizationEndpointURI in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getTokenEndpointURI

public URI getTokenEndpointURI()

Specified by:

getTokenEndpointURI in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getIdentityResolverEndpointURI

public URI getIdentityResolverEndpointURI()

Specified by:

getIdentityResolverEndpointURI in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getPostLogoutURI

public URI getPostLogoutURI()

Specified by:

getPostLogoutURI in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getTokenEndpointNeedsAuth

public boolean getTokenEndpointNeedsAuth()

Specified by:

getTokenEndpointNeedsAuth in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getIdentityResolverType

public String getIdentityResolverType()

Specified by:

getIdentityResolverType in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getClientId

public String getClientId()

Specified by:

getClientId in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getClientSecret

public String getClientSecret()

Specified by:

getClientSecret in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getTrustStore

public TrustStore getTrustStore()

Specified by:

getTrustStore in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getScope

public String getScope()

Specified by:

getScope in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getDefaultAuthorizationEndpointURI

public URI getDefaultAuthorizationEndpointURI()

Specified by:

getDefaultAuthorizationEndpointURI in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getDefaultTokenEndpointURI

public URI getDefaultTokenEndpointURI()

Specified by:

getDefaultTokenEndpointURI in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getDefaultIdentityResolverEndpointURI

public URI getDefaultIdentityResolverEndpointURI()

Specified by:

getDefaultIdentityResolverEndpointURI in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getDefaultScope

public String getDefaultScope()

Specified by:

getDefaultScope in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getTlsProtocolWhiteList

public List<String> getTlsProtocolWhiteList()

Specified by:

getTlsProtocolWhiteList in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getTlsProtocolBlackList

public List<String> getTlsProtocolBlackList()

Specified by:

getTlsProtocolBlackList in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getTlsCipherSuiteWhiteList

public List<String> getTlsCipherSuiteWhiteList()

Specified by:

getTlsCipherSuiteWhiteList in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getTlsCipherSuiteBlackList

public List<String> getTlsCipherSuiteBlackList()

Specified by:

getTlsCipherSuiteBlackList in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getConnectTimeout

public int getConnectTimeout()

Specified by:

getConnectTimeout in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

getReadTimeout

public int getReadTimeout()

Specified by:

getReadTimeout in interface OAuth2AuthenticationProvider<OAuth2AuthenticationProviderImpl>

validIdentityResolvers

public static Collection<String> validIdentityResolvers()